Vulnerabilidades en M-Files Corporation
31 resultadosAnálisis Vexday
M-Files Corporation apresenta um perfil de risco moderado com 30 vulnerabilidades catalogadas, predominantemente de injeção de código (CWE-79), mas sem indicadores de exploração ativa em campo. Apenas 1 falha crítica foi identificada no conjunto total, e a atividade recente é baixa com apenas 1 CVE nos últimos 90 dias, sugerindo que o risco imediato é contido. Recomenda-se monitoramento contínuo, mas não caracteriza situação de urgência crítica.
CVE-2025-5964HIGHPath traversal in M-Files APIEPSS 12.5%CVE-2023-6912HIGHBrute force vulnerability in M-Files user authenticationEPSS 1.0%CVE-2023-6910MEDIUMUncontrolled Resource Consumption in M-Files ServerEPSS 0.9%CVE-2024-4056HIGHDenial of service condition in M-Files ServerEPSS 0.8%CVE-2024-0563MEDIUMDenial of service condition in M-Files ServerEPSS 0.7%CVE-2021-41810MEDIUMScript injection in M-Files AdminEPSS 0.7%CVE-2024-10127CRITICALSupport for authentication bypass condition in M-Files LDAP authenticationEPSS 0.6%CVE-2024-6789HIGHPath traversal in M-Files APIEPSS 0.6%CVE-2025-0635MEDIUMDenial of Service condition in M-Files ServerEPSS 0.5%CVE-2025-13008HIGHSession Token Disclosure in M-Files WebEPSS 0.5%CVE-2025-0648MEDIUMM-Files Server crash via EOT database driver configurationEPSS 0.5%CVE-2023-4479HIGHStored XSS Vulnerability in M-Files WebEPSS 0.4%CVE-2024-9333MEDIUMPermission bypass in M-Files Connector for CopilotEPSS 0.4%CVE-2025-0619MEDIUMUnsafe stored password recoveryEPSS 0.4%CVE-2025-3086MEDIUMUser in anonymous role could create and delete viewsEPSS 0.4%CVE-2025-11681HIGHDenial of Service condition in M-Files ServerEPSS 0.4%CVE-2024-11176MEDIUMIncorrect evaluation of effective permissions in M-Files AinoEPSS 0.4%CVE-2026-0663MEDIUMDenial of Service condition in M-Files ServerEPSS 0.4%CVE-2025-14267MEDIUMUnintended temporary cached data included in a structure only copy intended to be empty of dataEPSS 0.4%CVE-2024-6881HIGHStored XSS VulnerabilityEPSS 0.3%